Пытаюсь насторить работу VPN тунеля между DI-808HV (81.198.1.2) и Windows Server 2003 (81.198.1.3) и не получается. Вроде все сделал по инструкции взятой с
http://www.dlink.ru/technical/faq_vpn_21.php (там правда между DFL-100 и Windows 2000 Server).
Windows Security Event пишет:
--------------------------------------------
IKE security association established.
Mode:
Key Exchange Mode (Main Mode)
Peer Identity:
Preshared key ID.
Peer IP Address: 81.198.1.2
Filter:
Source IP Address 81.198.1.3
Source IP Address Mask 255.255.255.255
Destination IP Address 81.198.1.2
Destination IP Address Mask 255.255.255.255
Protocol 0
Source Port 0
Destination Port 0
IKE Local Addr 81.198.1.3
IKE Peer Addr 81.198.1.2
IKE Source Port 500
IKE Destination Port 500
Peer Private Addr
Parameters:
ESP Algorithm Triple DES CBC
HMAC Algorithm MD5
Lifetime (sec) 28800
MM delta time (sec) 1
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
-----------------------------------------------
DI-808HV \syslog2.htm пишет:
------------------------------------------------
-01:23:37 iked_process_notify : ISAKMP_NMT_NO_PROPOSAL_CHOSEN
-01:23:42 IKED re-TX : QINIT to 81.198.1.3
-01:23:47 IKED re-TX : QINIT to 81.198.1.3
-01:23:57 IKED re-TX : QINIT to 81.198.1.3
-01:24:07 IKED re-TX : QINIT to 81.198.1.3
-01:24:27 IKED re-TX : QINIT to 81.198.1.3
-01:24:28 Send IKE (INFO) : delete [192.168.1.0|81.198.1.2]-->[81.198.1.3|10.1.126.0] phase 2
-01:24:28 IKE phase2 (IPSec SA) remove : 192.168.1.0 <-> 10.1.126.0
-01:24:28 inbound SPI = 0xc800306b, outbound SPI = 0x0
-01:24:28 Send IKE Q1(QINIT) : 192.168.1.0 --> 10.1.126.0
-01:24:28 Receive IKE INFO : 81.198.1.3 --> 81.198.1.2
-01:24:28 iked_process_notify : ISAKMP_NMT_NO_PROPOSAL_CHOSEN
-01:24:33 IKED re-TX : QINIT to 81.198.1.3
-01:24:38 IKED re-TX : QINIT to 81.198.1.3
-01:24:48 IKED re-TX : QINIT to 81.198.1.3
-01:24:58 IKED re-TX : QINIT to 81.198.1.3
-01:25:18 IKED re-TX : QINIT to 81.198.1.3
-01:25:19 Send IKE (INFO) : delete [192.168.1.0|81.198.1.2]-->[81.198.1.3|10.1.126.0] phase 2
-01:25:19 IKE phase2 (IPSec SA) remove : 192.168.1.0 <-> 10.1.126.0
-01:25:19 inbound SPI = 0xca0020f7, outbound SPI = 0x0
-01:25:19 Send IKE Q1(QINIT) : 192.168.1.0 --> 10.1.126.0
-01:25:19 Receive IKE INFO : 81.198.1.3 --> 81.198.1.2
------------------------------------------------------------------
Кто-нибудь знает в чем проблема и как ее решить ? Может есть готовое описание по подключению DI-808HV к Windows Server 2003 ?